zenvodo What happens to your data?
Clear answers about access, storage and analysis.
Your workspace is private
Customer reads and writes are checked against the signed-in owner. Browser responses containing account or task data are marked private and no-store. Live task content is not saved in browser local storage.
Connected credentials
Provider authorization credentials are encrypted before database storage. Your zenvodo sign-in password is hashed. Apple app-specific passwords and generic IMAP passwords must remain decryptable for provider login. IMAP hostnames and usernames are encrypted with the passwords, and never sent to the analysis provider. Passwords are not redisplayed or included in account exports. Cookies use the application’s secure and HttpOnly settings. The dashboard loads its scripts and fonts locally, without advertising.
Email analysis
Email analysis starts only after you review the named processor and its data policy and explicitly consent. Incoming and sent message content, sender, recipients, subject and relevant task context are sent to that processor. zenvodo uses the disclosed processor to identify tasks, promises, deadlines and follow-ups. Customers do not need their own OpenAI key or subscription. Changing the provider, OpenAI model or disclosed data policy requires fresh consent. OpenAI response storage is disabled, but provider retention and account data-sharing terms still apply. Do not connect sensitive mail until you have reviewed the processor’s data policy and zenvodo’s privacy notice. No provider or training guarantees are implied.
Download your workspace
Choose Download this workspace in Account for a private JSON or CSV copy. Every task status is included. JSON also includes local workspace settings, saved views, email rules, retained correction-learning data and task-action history. Downloads exclude credentials and original message bodies. Keep the file secure on your device. Account settings also offers a password-confirmed account-wide JSON download.
Retention and removal
Tasks and connection details remain until removed. Disconnecting a mailbox deletes its local tasks, credentials and learning memory. For Gmail, use Revoke Google access before disconnecting if you want to request remote revocation; iCloud app-specific passwords must be revoked at Apple; generic IMAP credentials must be revoked or changed with the mail provider. Daily briefing settings and hashed address-confirmation records remain with your account. Delivery history is pruned after ninety days while the delivery worker is active. Dedicated customer accounts can be deleted from Account settings after password confirmation and explicit billing/data acknowledgements. Backups, infrastructure logs and restricted security records follow separate retention policies. Read the privacy notice or contact support with questions about retained data.